skills/rhino-ty/commit-skill/commit/Gen Agent Trust Hub

commit

Pass

Audited by Gen Agent Trust Hub on May 10, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill incorporates a proactive security measure in Section 7.4 (Secrets blocklist), which explicitly instructs the agent to search for staged sensitive files—such as environment variables (.env), private keys (.pem, .key), and credentials—before finalizing a commit to prevent accidental data exposure.
  • [SAFE]: The provided scripts (analyze-history.sh, scaffold-dialect.sh) are local tools used for repository metadata analysis and document generation. They rely on standard system utilities (git, grep, awk, perl) and do not perform network operations or access unauthorized file paths.
  • [SAFE]: The instructions focus entirely on improving git workflow and history durability. There are no attempts at prompt injection, obfuscation, or privilege escalation.
  • [SAFE]: All external references and methodologies (Conventional Commits, Tim Pope, etc.) are well-known industry standards.
Audit Metadata
Risk Level
SAFE
Analyzed
May 10, 2026, 03:07 PM